[release] v1.0.0: eightyage

.github/ISSUE_TEMPLATE/feature-request-issue-template.md

@@ -0,0 +1,32 @@
+---
+name: Feature Request Issue Template
+about: Suggest an idea for this project
+title: "[FEATURE] OOO기능 구현"
+labels: ''
+assignees: ''
+
+---
+
+## 📝 Issue
+> 추가하려는 기능에 대해 설명해 주세요.
+
+---
+
+## 📄 설명
+
+- 기능
+- 기능
+- 기능
+
+---
+
+## ✅ 작업할 내용
+- [ ] 할일
+- [ ] 할일
+- [ ] 할일
+- [ ] 할일
+
+---
+
+## 🙋🏻 참고 자료
+> 관련 문서나 참고 링크가 있다면 적어주세요.

.github/workflows/cd.yml

@@ -0,0 +1,122 @@
+name: Deploy to EC2
+
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Docker Build
+        run: docker build -t eightyage .
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }}
+          aws-region: ap-northeast-2
+
+      - name: ECR Login
+        run: |
+          aws ecr get-login-password | \
+          docker login --username AWS --password-stdin ${{ secrets.ECR_URI }}
+
+      - name: Docker Images Check
+        run: docker images
+
+      - name: ECR Push
+        run: |
+          docker tag eightyage:latest ${{ secrets.ECR_URI }}
+          docker push ${{ secrets.ECR_URI }}
+
+      - name: Deploy on EC2
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.EC2_HOST }}
+          username: ubuntu
+          key: ${{ secrets.EC2_SSH_KEY }}
+          envs: ECR_URI,DB_URL,DB_USER,DB_PASSWORD,JWT_SECRET_KEY,AWS_ACCESS_KEY,AWS_SECRET_KEY,REDIS_HOST
+
+          script: |
+            export ECR_URI=${{ secrets.ECR_URI }}
+            export DB_URL=${{ secrets.DB_URL }}
+            export DB_USER=${{ secrets.DB_USER }}
+            export DB_PASSWORD=${{ secrets.DB_PASSWORD }}
+            export JWT_SECRET_KEY=${{ secrets.JWT_SECRET_KEY }}
+            export AWS_ACCESS_KEY=${{ secrets.AWS_ACCESS_KEY }}
+            export AWS_SECRET_KEY=${{ secrets.AWS_SECRET_KEY }}
+            export REDIS_HOST=${{ secrets.REDIS_HOST }}
+
+            docker ps -q --filter ancestor=$ECR_URI | xargs -r docker stop
+            docker ps -aq --filter ancestor=$ECR_URI | xargs -r docker rm
+
+            aws ecr get-login-password --region ap-northeast-2 | docker login --username AWS --password-stdin $ECR_URI
+            docker pull $ECR_URI
+            docker run -d -p 8080:8080 \
+              -e DB_URL=$DB_URL \
+              -e DB_USER=$DB_USER \
+              -e DB_PASSWORD=$DB_PASSWORD \
+              -e JWT_SECRET_KEY=$JWT_SECRET_KEY \
+              -e AWS_ACCESS_KEY=$AWS_ACCESS_KEY \
+              -e AWS_SECRET_KEY=$AWS_SECRET_KEY \
+              -e REDIS_HOST=$REDIS_HOST \
+              $ECR_URI
+
+      - name: Health Check
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.EC2_HOST }}
+          username: ubuntu
+          key: ${{ secrets.EC2_SSH_KEY }}
+          script: |
+            for i in {1..10}; do
+              echo "⏳ Health check attempt $i..."
+              if curl -f http://localhost:8080/actuator/health; then
+                echo "✅ Health check succeeded!"
+                exit 0
+              fi
+              sleep 5
+            done
+            echo "❌ Health check failed after multiple attempts"
+            exit 1
+
+      - name: Notify Slack - 배포 성공
+        if: success()
+        run: |
+          curl -X POST -H 'Content-type: application/json' \
+          --data '{
+            "text": "✅ *배포 성공!* 🎉",
+            "blocks": [
+              {
+                "type": "section",
+                "text": {
+                  "type": "mrkdwn",
+                  "text": "*✅ 배포 성공했습니다!*\n\n*브랜치:* `${{ github.ref_name }}`\n<http://3.39.158.229:8080/actuator/health|🔗 배포된 서비스 상태 보기>"
+                }
+              }
+            ]
+          }' \
+          ${{ secrets.SLACK_WEBHOOK_URL }}
+
+      - name: Notify Slack - 배포 실패
+        if: failure()
+        run: |
+          curl -X POST -H 'Content-type: application/json' \
+          --data '{
+            "text": "❌ *배포 실패!* 🔥",
+            "blocks": [
+              {
+                "type": "section",
+                "text": {
+                  "type": "mrkdwn",
+                  "text": "*❌ 배포 실패했습니다!*\n\n*브랜치:* `${{ github.ref_name }}`\n<https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|🔗 실패 로그 확인하기>"
+                }
+              }
+            ]
+          }' \
+          ${{ secrets.SLACK_WEBHOOK_URL }}

.github/workflows/ci.yml

@@ -0,0 +1,54 @@
+name: Java CI with Gradle
+
+on:
+  pull_request:
+    branches: [ "dev", "main" ]  # dev, main 모두 PR 대상
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    services:
+      mysql:
+        image: mysql:8.0        # MySQL 컨테이너 띄우기
+        env:
+          MYSQL_ROOT_PASSWORD: root        # Docker 내부 비밀번호 지정
+          MYSQL_DATABASE: team8_test       # Docker 내부 DB 이름
+        ports:
+          - 3306:3306
+        options: --health-cmd="mysqladmin ping --silent" --health-interval=10s --health-timeout=5s --health-retries=3
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+
+      - name: Wait for MySQL to be ready
+        run: |
+          for i in {1..10}; do
+            if mysql -hmysql -P3306 -uroot -proot -e "SELECT 1"; then
+              echo "MySQL is up!"
+              break
+            fi
+            echo "Waiting for MySQL..."
+            sleep 5
+          done
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x ./gradlew
+
+      - name: Clean Gradle Cache
+        run: ./gradlew clean --refresh-dependencies
+
+      - name: Test And Build with Gradle
+        env:
+          JWT_SECRET_KEY: ${{ secrets.JWT_SECRET_KEY }}
+        run: ./gradlew build -Dspring.profiles.active=ci
+

.gitignore

@@ -33,8 +33,9 @@ Thumbs.db
 .env
 
 # Spring Boot application properties/yaml
-application-*.yml
-application-*.properties
+#application-*.yml
+#application-*.properties
 
 # AWS config
 .aws/
+

Dockerfile

@@ -0,0 +1,12 @@
+FROM gradle:8.6-jdk17 AS build
+WORKDIR /app
+COPY . .
+RUN gradle clean build -x test
+
+FROM eclipse-temurin:17-jdk-alpine
+WORKDIR /app
+
+COPY --from=build /app/build/libs/*.jar app.jar
+EXPOSE 8080
+
+ENTRYPOINT ["java", "-Dspring.profiles.active=prod", "-jar", "app.jar"]

build.gradle

@@ -33,11 +33,34 @@ dependencies {
     runtimeOnly 'com.mysql:mysql-connector-j'
     annotationProcessor 'org.projectlombok:lombok'
     testImplementation 'org.springframework.boot:spring-boot-starter-test'
-    testImplementation 'org.springframework.security:spring-security-test'
     testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
 
+    // spring security
+    implementation 'org.springframework.boot:spring-boot-starter-security'
+    testImplementation 'org.springframework.security:spring-security-test'
+
+    // jwt
+    implementation group: 'io.jsonwebtoken', name: 'jjwt-api', version: '0.11.5'
+    runtimeOnly group: 'io.jsonwebtoken', name: 'jjwt-impl', version: '0.11.5'
+    runtimeOnly group: 'io.jsonwebtoken', name: 'jjwt-jackson', version: '0.11.5'
+
+    // cache
+    implementation 'org.springframework.boot:spring-boot-starter-cache'
+    implementation 'com.github.ben-manes.caffeine:caffeine:3.1.8'
+
     // spring cloud AWS S3
     implementation 'io.awspring.cloud:spring-cloud-aws-starter-s3:3.3.0'
+
+    // env
+    implementation 'io.github.cdimascio:java-dotenv:5.2.2'
+
+    // redis & redisson
+    implementation 'org.springframework.boot:spring-boot-starter-data-redis'
+    implementation 'org.redisson:redisson:3.23.5'
+
+    testImplementation 'org.mockito:mockito-inline:5.2.0'
+
+    implementation 'org.springframework.boot:spring-boot-starter-actuator'
 }
 
 tasks.named('test') {

src/main/java/com/example/eightyage/EightyageApplication.java

@@ -2,8 +2,14 @@
 
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.data.web.config.EnableSpringDataWebSupport;
+import org.springframework.scheduling.annotation.EnableScheduling;
 
+import static org.springframework.data.web.config.EnableSpringDataWebSupport.PageSerializationMode.VIA_DTO;
+
+@EnableSpringDataWebSupport(pageSerializationMode = VIA_DTO)
 @SpringBootApplication
+@EnableScheduling
 public class EightyageApplication {
 
     public static void main(String[] args) {

src/main/java/com/example/eightyage/domain/auth/controller/AuthController.java

@@ -0,0 +1,79 @@
+package com.example.eightyage.domain.auth.controller;
+
+import com.example.eightyage.domain.auth.dto.request.AuthSigninRequestDto;
+import com.example.eightyage.domain.auth.dto.request.AuthSignupRequestDto;
+import com.example.eightyage.domain.auth.dto.response.AuthAccessTokenResponseDto;
+import com.example.eightyage.domain.auth.dto.response.AuthTokensResponseDto;
+import com.example.eightyage.domain.auth.service.AuthService;
+import com.example.eightyage.global.annotation.RefreshToken;
+import jakarta.servlet.http.Cookie;
+import jakarta.servlet.http.HttpServletResponse;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.annotation.Secured;
+import org.springframework.web.bind.annotation.*;
+
+import static com.example.eightyage.domain.user.userrole.UserRole.Authority.ADMIN;
+import static com.example.eightyage.domain.user.userrole.UserRole.Authority.USER;
+
+@RestController
+@RequiredArgsConstructor
+@RequestMapping("/api")
+public class AuthController {
+
+    private final AuthService authService;
+    private static final int REFRESH_TOKEN_TIME = 7 * 24 * 60 * 60; // 7주일
+
+    /* 회원가입 */
+    @PostMapping("/v1/auth/signup")
+    public AuthAccessTokenResponseDto signup(
+            @Valid @RequestBody AuthSignupRequestDto request,
+            HttpServletResponse httpServletResponse
+    ) {
+        AuthTokensResponseDto tokensResponseDto = authService.signup(request);
+
+        setRefreshTokenCookie(httpServletResponse, tokensResponseDto.getRefreshToken());
+
+        return new AuthAccessTokenResponseDto(tokensResponseDto.getAccessToken());
+    }
+
+    /* 로그인 */
+    @PostMapping("/v1/auth/signin")
+    public AuthAccessTokenResponseDto signin(
+            @Valid @RequestBody AuthSigninRequestDto request,
+            HttpServletResponse httpServletResponse
+    ) {
+        AuthTokensResponseDto tokensResponseDto = authService.signin(request);
+
+        setRefreshTokenCookie(httpServletResponse, tokensResponseDto.getRefreshToken());
+
+        return new AuthAccessTokenResponseDto(tokensResponseDto.getAccessToken());
+    }
+
+    /* 토큰 재발급 (로그인 기간 연장) */
+    @Secured({USER, ADMIN})
+    @GetMapping("/v1/auth/refresh")
+    public AuthAccessTokenResponseDto refresh(
+            @RefreshToken String refreshToken,
+            HttpServletResponse httpServletResponse
+    ) {
+        AuthTokensResponseDto tokensResponseDto = authService.reissueAccessToken(refreshToken);
+
+        setRefreshTokenCookie(httpServletResponse, tokensResponseDto.getRefreshToken());
+
+        return new AuthAccessTokenResponseDto(tokensResponseDto.getAccessToken());
+    }
+
+    /* http only 사용하기 위해 쿠키에 refreshToken 저장 */
+    private void setRefreshTokenCookie(HttpServletResponse response, String refreshToken) {
+        Cookie cookie = new Cookie("refreshToken", refreshToken);
+        cookie.setMaxAge(REFRESH_TOKEN_TIME);
+        cookie.setSecure(true);
+        cookie.setHttpOnly(true);
+        cookie.setPath("/");
+
+        response.addCookie(cookie);
+    }
+
+
+}